127b938774a42675e81d2ffb3d9787da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

127b938774a42675e81d2ffb3d9787da
Size

5KB
MD5

127b938774a42675e81d2ffb3d9787da
SHA1

cf27c43fb3b697fabd3610bde42f165185030040
SHA256

0a0e78765044b289dadbcb3a3db76b3c987cf2aa73ad6740368307bf9fce69aa
SHA512

c96c9a3f92a8b1b2c44c4b5237063384482fdf9b3d59973d4d478f453dc9d627803518c03e938eb8a40d409fa6e6d973a6f01d07e912b2d88f9f1782848c210a
SSDEEP

48:ymMRPV4n4fBMhtgyu911768v2EIci/6TorBF6pFjJmGJ4XVGxGIGSthrFKpfAZUE:kb2htgFp68v2EItbMmGlhSfm81J+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
127b938774a42675e81d2ffb3d9787da

Files

127b938774a42675e81d2ffb3d9787da
.exe windows:4 windows x86 arch:x86

eeae0a7137e5468e82316052af18cf92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
GlobalAlloc
GlobalFree
MoveFileExA
Sleep
VirtualAlloc
VirtualFree
lstrcatA
lstrcpyA

user32

FindWindowA
FindWindowExA
SendMessageA
ShowWindow

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE